AMENDMENT 

Please replace the claims with the following: — - — 

1 1 . (Once Amended) A method for selectively auditing accesses to a 

2 relational database, comprising: / 

3 receiving a query for the relational database; 

4 automatically modifying the quary prior to processing the query, so that 

5 processing the query causes an audit racord to be created and recorded for rows in 

6 relational tables that are accessed by me query and that satisfy an auditing 

7 condition; / 

8 processing the modified query to produce a query result, wherein 

9 processing the modified query inc/udes, 

10 creating the audit record for rows in relational tables that 

11 are accessed by me query and that satisfy the auditing condition, 

12 and / 

13 recording the audit record in an audit record store; and 

1 4 returning the query result . 

1 2. (Unchanged) The method of claim 1, further comprising, if the query 

2 includes a select statement, inserting a case statement into the select statement that 

3 calls a function that cauJses the audit record to be created and recorded if the 

4 auditing condition is satisfied. 

1 3. (Unchanged) The method of claim 2, further comprising ensuring that 

2 the case statement is/evaluated near the end of the query processing so that the 

3 case statement is evaluated only after other conditions of the query are satisfied. 



2 



4 so that the audit record is created only far rows that are actually accessed by the 

5 query. / 

1 4. (Unchanged) The method ot claim 1, further comprising retrieving the 

2 auditing condition for a given table ffom a data structure associated with the given 

3 table. / 

1 5. (Unchanged) The methad of claim 1, wherein if the query modifies at 

2 least one entry in the relational database, using a relational database system trigger 

3 to create and record the audit reaord for the modification to the relational 

4 database. / 

1 6. (Unchanged) The nifethod of claim 2, wherein inserting the case 

2 statement into the query furtner comprises: 

3 inserting the case staiement into the query; 

4 allowing a query processor to allocate buffers for the query; 

5 removing the case statement from the query; 

6 allowing the query/processor to generate a query plan for the query; and 

7 scheduling the casje statement near the end of the query plan to ensure that 

8 the case statement is evafuated only after other conditions of the query are 

9 satisfied, so that the aucMt record is created only for rows that are actually accessed 
10 by the query. / 

1 7. (Unchanged) The method of claim 1 , wherein the audit record includes: 

2 a user name for a user making the query; 

3 a time stamp specifying a time of the query; and 

4 a text of the query. 
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1 8, (Unchanged) The method of claim 1, wherein the auditing condition 

2 includes a condition for a field withm the relational database. 

1 9. (Once Amended) A cor^puter-readable storage medium storing 

2 instructions that when executed Iw a computer cause the computer to perform a 

3 method for selectively auditing Recesses to a relational database, the method 

4 comprising: 

5 receiving a query for thfe relational database; 

6 automatically modifying the query prior to processing the query, so that 

7 processing the query causes an audit record to be created and recorded for rows in 

8 relational tables that are accessed by the query and that satisfy an auditing 

9 condition; 

10 processing the modfified query to produce a query result, wherein 

1 1 processing the modified query includes, 

12 creating the audit record for rows in relational tables that 

13 are acce/sed by the query and that satisfy the auditing condition, 

14 and 

15 /recording the audit record in an audit record store; and 

1 6 returning theiquery result. 

1 10. (Unchanged) The computer-readable storage medium of claim 9, 

2 wherein the method further comprises, if the query includes a select statement, 

3 inserting a case statement into the select statement that calls a function that causes 

4 the audit record to be created and recorded if the auditing condition is satisfied. 



1 11. (Unchanged) The computer-readable storage medium of claim 10, 

2 wherein the meihod further comprises ensuring that the case statement is 

3 evaluated near the end of the query processing to that the case statement is 
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4 evaluated only after other conditions of the query are satisfied, so that the audit 

5 record is created only for rows/that are actually accessed by the query. 

1 12. (Unchanged) The /computer-readable storage medium of claim 9, 

2 wherein the method fiirther comprises retrieving the auditing condition for a given 

3 table from a data structure associated with the given table. 

1 13. (Unchanged) me computer-readable storage medium of claim 9, 

2 wherein if the query mod/fies at least one entry in the relational database, the 

3 method further comprises using a relational database system trigger to create and 

4 record the audit record for the modification to the relational database. 

1 14. (Unchanged) The computer-readable storage medium of claim 10, 

2 wherein inserting the case statement into the query ftirther comprises: 

3 inserting the case statement into the query; 

4 allowing a/query processor to allocate buffers for the query; 

5 removin^the case statement from the query; 

6 allowingf the query processor to generate a query plan for the query; and 

7 scheduling the case statement near the end of the query plan to ensure that 

8 the case statement is evaluated only after other conditions of the query are 

9 satisfied, so traat the audit record is created only for rows that are actually accessed 
10 by the query./ 

1 15. (/Unchanged) The computer-readable storage medium of claim 9, 

2 wherein the audit record includes: 

3 a user name for a user making the query; 

4 a tine stamp specifying a time of the query; and 

5 a text of the query. 
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1 16. (Unchanged) The computer-readable storage medium of claim 9, 

2 wherein the auditing condition/includes a condition for a field within the 

3 relational database. 

1 17. (Once Amended)/ An apparatus that selectively audits accesses to a 

2 relational database, compri^ng: 

3 a receiving mechan/sm that is configured to receive a query for the 

4 relational database; 

5 a query modification mechanism that is configured to automatically 

6 modify the query, prior to processing the query, so that processing the query 

7 causes an audit record to be created and recorded for rows in relational tables that 

8 are accessed by the qudiy and that satisfy an auditing condition; 

9 a query processor that is configured to process the modified query to 

1 0 produce a query resuLc, wherein processing the modified query includes, 

1 1 /creating the audit record for rows in relational tables that are 

12 accessed by the query and that satisfy the auditing condition, and 

1 3 / recording the audit record in an audit record store; and 

14 a returning/mechanism that is configured to return the query result. 

1 18. (Unchanged) The apparatus of claim 17, wherein if the query includes 

2 a select statemeri, the query modification mechanism is configured to insert a 

3 case statement into the select statement that calls a function that causes the audit 

4 record to be created and recorded if the auditing condition is satisfied. 

1 19. (Unchanged) The apparatus of claim 18, wherein the query 

2 modification mechanism is configured to ensure that the case statement is 

3 evaluated near the end of the query processing so that the case statement is 



4 evaluated only after other conditions of the query are satisfied, so that the audit 

5 record is created only for rows that are actually accessed by the query. 

1 20. (Unchanged) The apparatus of claim 17, wherein the query 

2 modification mechanism is configured to retrieve the auditing condition for a 

3 given table from a data stmcpire associated with the given table. 

1 21. (Unchanged) Tne apparatus of claim 17, wherein if the query modifies 

2 at least one entry in the relational database, the apparatus uses a relational 

3 database system trigger to/create and record the audit record for the modification 

4 to the relational database/ 

1 22. (Unchanged! The apparatus of claim 18, wherein the query 

2 modification mechanism is configured to: 

3 insert the case statement into the query; 

4 allow the quew processor to allocate buffers for the query; 

5 remove the case statement from the query; 

6 allow the query processor to generate a query plan for the query; and 

7 schedule the case statement near the end of the query plan to ensure that 

8 the case statement is evaluated only after other conditions of the query are 

9 satisfied, so that tne audit record is created only for rows that are actually accessed 
10 by the query. I 

1 23. (Unchanged) The apparatus of claim 17, wherein the audit record 

2 includes: / 

3 a user name for a user making the query; 

4 a time stamp specifying a time of the query; and 



5 a text of the query. 
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1 24. (Unchanged) The s^paratus of claim 17, wherein the auditing 

2 condition includes a condition for a field within the relational database. 
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